{"id":"EUVD-2026-42717","enisaUuid":"b2ed9f95-1a54-3036-a29c-05e9d94ee4da","description":"DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes `POST /mcp` without any authentication: `createMcpExpressApp` is called without an `authProvider` and no middleware guards the route, so any network-reachable client can issue an unauthenticated `initialize` request and obtain a valid MCP session identifier. In reproduced testing against commit `5e1302171e99`, an unauthenticated client was able to initialize a session, enumerate tools, and invoke the local `deepseek_sessions` tool with no credentials. The same unauthenticated session also exposes `deepseek_chat`, whose handler uses the server-side `DEEPSEEK_API_KEY` when self-hosted deployments configure one. This issue applies to self-hosted HTTP mode, not the separately documented hosted BYOK endpoint in `README.md`, which expects an `Authorization: Bearer ...` header. Upstream self-hosted container assets enable HTTP mode by default (`Dockerfile`) and publish port `3000` (`docker-compose.yml`). Version 1.8.0 contains a patch for this issue.","datePublished":"Jul 9, 2026, 9:10:53 PM","dateUpdated":"Jul 10, 2026, 1:35:30 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/arikusi/deepseek-mcp-server/security/advisories/GHSA-72f3-6w86-7rv3\nhttps://github.com/arikusi/deepseek-mcp-server/blob/main/CHANGELOG.md#180---2026-06-14\nhttps://github.com/arikusi/deepseek-mcp-server/releases/tag/v1.8.0\n","aliases":"CVE-2026-55605\nGHSA-72f3-6w86-7rv3\n","assigner":"GitHub_M","epss":0.52,"enisaIdProduct":[{"id":"e1bdd7ff-7958-3cf5-8d70-f52a6f2a4dd3","product":{"name":"deepseek-mcp-server","vendor":{"name":"arikusi"}},"product_version":"1.4.2, \u003c 1.8.0"}],"enisaIdVendor":[{"id":"577d993f-833c-3e33-8454-8920416b5ce7","vendor":{"name":"arikusi"}}],"enisaIdVulnerability":[{"id":"0ff80be9-ff0b-39aa-ac84-c78ac0914148","vulnerability":{"id":"GHSA-72f3-6w86-7rv3","description":"@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint","datePublished":"Aug 25, 2026, 6:38:30 PM","dateUpdated":"Aug 25, 2026, 6:38:30 PM","baseScore":0.0,"references":"https://github.com/arikusi/deepseek-mcp-server/security/advisories/GHSA-72f3-6w86-7rv3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-55605\nhttps://github.com/arikusi/deepseek-mcp-server/pull/4\nhttps://github.com/arikusi/deepseek-mcp-server/commit/dab07ed93ddde0ab219d4cb7066785847db53a32\nhttps://github.com/arikusi/deepseek-mcp-server\nhttps://github.com/arikusi/deepseek-mcp-server/blob/main/CHANGELOG.md#180---2026-06-14\nhttps://github.com/arikusi/deepseek-mcp-server/releases/tag/v1.8.0\n","enisa_id":"EUVD-2026-42717\n","aliases":"CVE-2026-55605\nGHSA-72f3-6w86-7rv3\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:04:29 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b75412db-a976-3df6-8a72-e26ba2d97c60","vulnerability":{"id":"CVE-2026-55605","description":"DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes `POST /mcp` without any authentication: `createMcpExpressApp` is called without an `authProvider` and no middleware guards the route, so any network-reachable client can issue an unauthenticated `initialize` request and obtain a valid MCP session identifier. In reproduced testing against commit `5e1302171e99`, an unauthenticated client was able to initialize a session, enumerate tools, and invoke the local `deepseek_sessions` tool with no credentials. The same unauthenticated session also exposes `deepseek_chat`, whose handler uses the server-side `DEEPSEEK_API_KEY` when self-hosted deployments configure one. This issue applies to self-hosted HTTP mode, not the separately documented hosted BYOK endpoint in `README.md`, which expects an `Authorization: Bearer ...` header. Upstream self-hosted container assets enable HTTP mode by default (`Dockerfile`) and publish port `3000` (`docker-compose.yml`). Version 1.8.0 contains a patch for this issue.","datePublished":"Jul 9, 2026, 9:10:53 PM","dateUpdated":"Jul 10, 2026, 1:35:30 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/arikusi/deepseek-mcp-server/security/advisories/GHSA-72f3-6w86-7rv3\nhttps://github.com/arikusi/deepseek-mcp-server/blob/main/CHANGELOG.md#180---2026-06-14\nhttps://github.com/arikusi/deepseek-mcp-server/releases/tag/v1.8.0\n","enisa_id":"EUVD-2026-42717\n","assigner":"GitHub_M","epss":0.52,"dataProcessed":"Nov 3, 2026, 7:16:19 AM","vulnerabilityProduct":[{"id":"3d02a441-c84f-3aa8-bacc-8f7edb004403","product":{"name":"deepseek-mcp-server","vendor":{"name":"arikusi"}},"product_version":"1.4.2, \u003c 1.8.0"}],"vulnerabilityVendor":[{"id":"1381be48-6caf-3b6e-a784-d9a57011b5ed","vendor":{"name":"arikusi"}}]}}],"enisaIdAdvisory":[]}